CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- tejari bravo solutionCross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo...8.0 High
- sinatrarb sinatraSinatra Path Traversal vulnerability5.3 Medium
- idashboardsAn issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak...8.1 High
- idashboardsAn issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive...7.5 High
- idashboardsAn issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive...7.5 High
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIn the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka...7.8 High
- jupyter oauthenticatorJupyterHub OAuthenticator elevation of privilege8.8 High
- octobercms octoberOctober CMS - RainLab Blog Plugin XSS6.1 Medium
- pluck-cms pluckAn issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability...6.1 Medium
- saxum2003 astroSQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter.9.8 Critical
- squadmanagement project squadmanagementSQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter.9.8 Critical
- saxum2003 saxum pickerSQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter.9.8 Critical
- saxum2003 numerologySQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.9.8 Critical
- techjoomla jticketingSQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with...9.8 Critical
- dthdevelopment dt registerSQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request.9.8 Critical
- quanticalabs timetable responsive scheduleSQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view...9.8 Critical
- google map landkarten project map landkartenSQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid...9.8 Critical
- techjoomla invitexSQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in...9.8 Critical
- fastballproductions fastballSQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view...9.8 Critical
- joombooking jb busSQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.9.8 Critical
- neojoomla neorecruitSQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2)...9.8 Critical
- comdev jomestate proSQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter...9.8 Critical
- joomsky js autozSQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs...9.8 Critical
- realpin project realpinSQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter.9.8 Critical
- techsolsystem file download trackerSQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield...9.8 Critical
- joomsky js jobsSQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a...9.8 Critical
- aist project aistSQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view...9.8 Critical
- staff master project masterSQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name...9.8 Critical
- web-dorado form makerSQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to...9.8 Critical
- allvideos reloaded project reloadedSQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.9.8 Critical
- chillcreations ccnewsletterSQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task...9.8 Critical
- social pinboard project pinboardSQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the...9.8 Critical
- jquickcontact project jquickcontactSQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid=...9.8 Critical
- ordasoft advertisement boardSQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task...9.8 Critical
- web-dorado gallery wdSQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or...9.8 Critical
- solidresSQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a...9.8 Critical
- thekrotek smart shoutboxSQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor...9.8 Critical
- albonico simplecalendarSQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array...9.8 Critical
- ordasoft medialibrarySQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter...9.8 Critical
- techjoomla jgiveSQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or...9.8 Critical
gcc-4.9Debiangcc-4.9 - updateNo score- trend micro user-mode hooking (umh) module, trendmicro deep security, endpoint sensor +3 more +5 moreA DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an...7.0 High
- trend micro interscan messaging security virtual applianceA vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1...8.1 High
- tiki tikiwiki cms\/groupwareAn XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain...5.4 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe admin backupprogress action in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed...4.8 Medium
- atlassian fisheyeVarious resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x) and...6.1 Medium
- atlassian crucibleThe view review history resource in Atlassian Crucible before version 4.4.3 (the fixed version...5.4 Medium
- golang go, debian linux +1 moreThe "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not...8.8 High
- flets address selection tool, nippon telegraph and telephone west corporation flet's v4 / v6 address selection tool +1 moreUntrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker...7.8 High
- flets azukeru backup tool, nippon telegraph and telephone east corporation "flet's azukeru backup tool" +1 moreUntrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier...7.8 High
- Show moreLoading…